How to enable vino?
by Aaron Gaudio
I've installed vino and tried to turn on the 'remote desktop' from the
preferences, with a password. However, when I try to connect vncviewer
to my box ("192.168.1.129:0") I get a connection refused. What am I
missing?
--
Aaron Gaudio <prothonotar(a)tarnation.dyndns.org>
19 years, 4 months
warning to list
by mitch epling
ew Phishing Expedition Targets Red Hat/Fedora Users
Oct 25, 2004, 02 :30 UTC (0 Talkback[s]) (6 reads)
(Other stories by Brian Proffitt)
http://linuxtoday.com/security/2004102500826SCRHSW
By Brian Proffitt
Managing Editor
It's not often that someone tries launching a trojan attack on Linux
users, but earlier this weekend it appears that someone was trying to do
just that to Red Hat and Fedora Core users.
An e-mail message was sent to several Red Hat users over the weekend,
claiming to be from the RedHat [sic] Security Team. The note warned
recipients to download and install a patch for fileutils-1.0.6,
indicating that a vulnerability "could allow a remote attacker to
execute arbitrary code with root privileges."
The note was seen in the wild earlier this weekend, but it is still
being delivered. This reporter received the message as late as 6:55 PM
EDT today. The message arrived five times, and were all delivered to my
work account, which is not the account I use to register products.
The content of the note, complete with Red Hat logo, tries to tell a
good tale, as seen below, but the spelling errors and the improper From
address are clues of the note's false nature.
"Original issue date: October 20, 2004
"Last revised: October 20, 2004
"Source: RedHat
"A complete revision history is at the end of this file.
"Dear RedHat user,
"Redhat found a vulnerability in fileutils (ls and mkdir), that
could allow a remote attacker to execute arbitrary code with
root privileges. Some of the affected linux distributions
include RedHat 7.2, RedHat 7.3, RedHat 8.0, RedHat 9.0, Fedora
CORE 1, Fedora CORE 2 and not only. It is known that *BSD and
Solaris platforms are NOT affected.
"The RedHat Security Team strongly advises you to immediately
apply the fileutils-1.0.6 patch. This is a critical-critical
update that you must make by following these steps:
* "First download the patch from the Security RedHat mirror: wget
www.fedora-redhat.com/fileutils-1.0.6.patch.tar.gz
* Untar the patch: tar zxvf fileutils-1.0.6.patch.tar.gz
* cd fileutils-1.0.6.patch
* make
* ./inst
"Again, please apply this patch as soon as possible or you risk
your system and others` to be compromised.
"Thank you for your prompt attention to this serious matter,
RedHat Security Team..."
The domain fedora-redhat.com is part of a netblock owned by Yahoo,
according to Netcraft.com. It is not an official Red Hat site.
The security team at Red Hat has already noted the existence of the fake
warning, and has posted this message, dated October 23, at
http://www.redhat.com/security/:
"Red Hat has been made aware that emails are circulating that
pretend to come from the Red Hat Security Team. These emails
tell users to download and run an update from a users home
directory. This fake update appears to contain malicious code.
Official messages from the Red Hat security team are never sent
unsolicited, are always sent from the address
secalert(a)redhat.com, and are digitally signed by GPG. All
official updates for Red Hat products are digitally signed and
should not be installed unless they are correctly signed and the
signature is verified..."
Red Hat and Fedora Core users are urged not to download or install the
software highlighted in this ficticious message.
19 years, 4 months
Fedora Core 2 Test Update: wget-1.9.1-16.fc2
by Karsten Hopp
---------------------------------------------------------------------
Fedora Test Update Notification
FEDORA-2004-351
2004-10-27
---------------------------------------------------------------------
Product : Fedora Core 2
Name : wget
Version : 1.9.1
Release : 16.fc2
Summary : A utility for retrieving files using the HTTP or FTP protocols.
Description :
GNU Wget is a file retrieval utility which can use either the HTTP or
FTP protocols. Wget features include the ability to work in the
background while you are logged out, recursive retrieval of
directories, file name wildcard matching, remote file timestamp
storage and comparison, use of Rest with FTP servers and Range with
HTTP servers to retrieve files over slow or unstable connections,
support for Proxy servers, and configurability.
---------------------------------------------------------------------
Update Information:
This new release of wget adds support for large files >2Gb
Please test if the following works (make sure that your web/ftp
server supports large files):
- downloads of files smaller / larger than 2Gb
via http and ftp
- continue aborted downloads smaller / larger 2Gb
via http and ftp
Add your feedback to http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=123524
If I hear of no larger problems until Thu Nov 04, this package will be
released as an update for Fedora Core 2.
Thanks
Karsten
---------------------------------------------------------------------
* Fri Oct 22 2004 Karsten Hopp <karsten(a)redhat.de> 1.9.1-16.fc2
- build large file version for FC2
* Wed Sep 29 2004 Karsten Hopp <karsten(a)redhat.de> 1.9.1-17
- additional LFS patch from Leonid Petrov to fix file lengths in
http downloads
* Thu Sep 16 2004 Karsten Hopp <karsten(a)redhat.de> 1.9.1-16
- more fixes
* Tue Sep 14 2004 Karsten Hopp <karsten(a)redhat.de> 1.9.1-15
- added strtol fix from Leonid Petrov, reenable LFS
* Tue Sep 14 2004 Karsten Hopp <karsten(a)redhat.de> 1.9.1-14
- buildrequires gettext (#132519)
* Wed Sep 01 2004 Karsten Hopp <karsten(a)redhat.de> 1.9.1-13
- disable LFS patch for now, it breaks normal downloads (123524#c15)
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/testing/2/
0f36e50c0c40ffdd5508d3862c54ba6f SRPMS/wget-1.9.1-16.fc2.src.rpm
96be1e722ca313667b54b5fd1e04f824 x86_64/wget-1.9.1-16.fc2.x86_64.rpm
678ab943f66b4991ccd9c6d6c101652d x86_64/debug/wget-debuginfo-1.9.1-16.fc2.x86_64.rpm
945a00f2a922adaf2ff0f035972793a7 i386/wget-1.9.1-16.fc2.i386.rpm
fc1841ba974b739454e16031cc927111 i386/debug/wget-debuginfo-1.9.1-16.fc2.i386.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command. You may
need to edit your up2date channels configuration. Within
/etc/sysconfig/rhn/sources enable the following line:
yum updates-testing http://download.fedora.redhat.com/pub/fedora/linux/core/updates/testing/2...
---------------------------------------------------------------------
--
Karsten Hopp <karsten(a)redhat.de> GPG 1024D/70ABD02C
Fingerprint D2D4 3B6B 2DE4 464C A432 210A DFF8 A140 70AB D02C
Red Hat Deutschland, Hauptstaetter Str.58
70178 Stuttgart, Tel.+49-711-96437-0, Fax +49-711-96437-111
19 years, 4 months
Should Fedora rpms be signed?
by nodata
A recent scam involving fake updates to Fedora has highlighted the lack of
signed RPMs for Fedora Core.
"Red Hat has been made aware that emails are circulating that pretend to
come from the Red Hat Security Team"
[..]
"All official updates for Red Hat products are digitally signed and should
not be installed unless they are correctly signed and the signature is
verified."
-- http://www.redhat.com/security/
It's possibly that some of the people testing Fedora Core are connected to
a network of machines that they'd rather not put at risk. It might also be
possible that a user testing Fedora Core could even use the same password
as another machine connected to that network.
Perhaps some users of Fedora Core also have personal information stored on
the machine which FC is installed on.
I posted a bug. I got a reply, from Duke:
"1. fedora core is not a product, it is a project.
2. releases from rawhide are not official."
-- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136461
What does the list think about signed RPMs - are they unnecessary for a
community project, or are they useful?
19 years, 4 months
FC3rc5
by Elliot Lee
For your weekend enjoyment, please try:
http://fedora.linux.duke.edu/FC3-rc/3/
http://sunsite.mff.cuni.cz/OS/Linux/Dist/Fedora.RC/3/
ftp://sunsite.mff.cuni.cz/OS/Linux/Dist/Fedora.RC/3/
rsync://sunsite.mff.cuni.cz/ftp/OS/Linux/Dist/Fedora.RC/3/
http://testing.fedora.redhat.com/tree/ (still syncing, should be ready by 8pm EDT Oct 29.)
This is likely to be the last FC3 release candidate, so please give it all
the loving attention you possibly can. It does have fixes for some of the
more serious issues reported here - your efforts are having results. When
testing FC3rc5, things that could use extra-special attention are upgrades
and the kernel. Please make sure to file any showstopper bugs (data loss
or corruption, major install/upgrade failures) in bugzilla and bring the
bug #'s to our attention.
In respond to all the queries about "why are the .iso timestamps
changing", it's because I'm putting the latest RC in the same location as
the older ones, so the files do change.
Thanks y'all!
-- Elliot
19 years, 4 months
KMail Links + Firefox Browser
by Robert Couture
Hello ...
I discovered quite by accident that there is a problem with links in KMail &
FireFox when I recently had trouble with Evolution.
If I click on a link in a mail message when the browser loads all images are
broken as well as all referneces to ccs files, and other resources because
the URI is something like:
file:///var/tmp/kdecache-fido/krun/27670.0.fedora.php
This only happens with Firefox. Mozilla & Konquerer show the proper URI (in
this case):
http://i2o.shadowconnect.com/fedora.php
Has anyone else experienced this? If so has it been bugzilla'd and where
should itr be reported, Redhat or upstream?
Thanks.
Rob.
19 years, 4 months
System Settings=>Network rant
by Timothy Murphy
I want to be able to use my laptop easily in 2 places - home and work.
I imagine this is a very common wish.
I'm baffled by the enormous problem Fedora seems to be making of this.
There seem to be 3 different applications which deal with the issue:
1. The System Settings->Network GUI which apparently comes with Fedora
2. NetApplet
3 NetworkManager
I have had prblems with all three.
As I said, I'm baffled by this, as the issue seems to me almost trivial.
I have two tiny shell scripts which do the job OK for me,
so it can hardly require brain surgery.
But I'd like touse a standard system if there is one that works.
The problems I've encountered:
1. Changes to one profile affect other profiles
2. I tried compiling this, but it did not function at all - probably my fault
3. Seemed only to work with dhcp, which I don't use at home.
--
Timothy Murphy
e-mail (<80k only): tim /at/ birdsnest.maths.tcd.ie
tel: +353-86-2336090, +353-1-2842366
s-mail: School of Mathematics, Trinity College, Dublin 2, Ireland
19 years, 4 months
FC3 RC3 - Networked LPD server printing still not working.
by Gerry Tool
I have just done a fresh install of FC3, Release Candidate 3. Printing
to a networked LPD server still will not work. This is a bug (#133064)
that is assigned to the kernel. Telnet to the print server fails, but
ping succeeds. FC2 telnets fine to the print server.
Gerry Tool
19 years, 4 months
5 second cpu spike in FC3T3
by W. Guy Thomas
I get this spike from the cpu every 5 seconds now that I'm on FC3T3.
I can provide more info, but just for starters, has anyone else seene
this?
Is it the ext3 maybe?
Thanks.
--
=Guy
19:58:34 up 1 day, 22:27, 3 users, load average: 0.93, 0.79, 0.64
19 years, 4 months
Kudos to whomever worked on the synaptics touchpad driver !
by Kim Lux
I'm using the new synaptics touchpad driver on my HP ZD7280. It works
very, very well, better than it does in Windows. The scroll function is
really handy.
I've got two small criticisms:
a) I dislike the "select when heldover" because it sometimes opens
things I don't want to have opened. Is there a way to disable this ?
b) The cursor gets a little jumpy in the corners, most noticeably when
trying to open the menu in KDE. I'm wondering if there is something in
the cursor positioning algorithm that causes this.
I love how the tap and double tap work now.
Question: is there a way to set the synaptics device parameters in a
graphical tool, ie like system-config-mouse ?
19 years, 5 months